Europaisches Patentamt 

® 0))) European Patent Office ® Publication number 0 212 842 

Office europ6en des brevets . 

A1 



® EUROPEAN PATENT APPLICATION 

@ Application number: 8630544ZS @ Int. a*: G 07 F 7/00, G 07 F 7/02, 

@ Date of filing: 15.07^ ^ ^ 9/00 





PnoTTty: 22.07.85 QB 8518483 


® 


Applicant: CTTY WHEELS UMrTHD, 16 Berfceley Street. 
London W1X5AE(QB) 




Date of publication of application: 04.03 Jt7 
Bulletin 87/10 


® 


Inventor: Dodson, Ctwtetophef. MORTIMER 
TECHNOLOGY UMrTED Mortimer Hilt, Mortimer 
Reeding Berfcetiire RQ7 SPG (QB) 




Designated Contracting States: AT BE CH DE FH GB fT U 
LUNLSE 


® 


Representath/e : Wrfght, Peter David John et at. R.Q.C. 
JenUna A Co. 12-15, Fetter Lane, Ljondon EC4A 1PL 
(OB) 



® Control tystem. 



@ A control system for use in connection with one or more 
tacflities comprising means for receiving information identifying a 
partiaiar token, which system is operable so as, when intennh- 
tentty presented with the token after recerving sM kientrfying 
information, to recognise that token as a key and to permit access 
to and/or operatwn of one or more of the fadlibes until a 
predetennrMned tirne has elapsed or a selected evem has occurred 
and until then not to recognise tokens of other random users, and 
thereafter no kinger to pemiit access to and/or operation of the or 
each facility until further ktontifying informatx>n relating to a valid 
tokan is recerved. 
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CONTROL SYSTEM 

The present invention relates to a control system 
operative to recognise a token carried by a user so as 
to permit access to one or more facilities. In a 
particular embodiment, the system is operable to 
recognise a token as a key for a door lock. For 
example, the control system may be operable to 
recognise a token as a key for the doors of a hired 
vehicle forming part of an urban transport system. 

According to a first aspect of the present 
invention we provide a control system for use in 
connection with one or more facilities of a vehicle 
comprising means for receiving information identifying 
a particular token, which system is operable so as, 
when intermittently presented with the token after 
receiving said identifying information, to recognise 
that token as a key and to permit access to and/or 
operation of one or more of the facilities until a 
predetermined time has elapsed or a selected event has 
occurred and until then not to recognise tokens of 
other random users, and thereafter no longer to permit 
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access to and/or operation of the or each facility 
until further identifying information relating to a 
valid token is received. 

The selected event may be presentation of the 
token to the control system in ,a particular manner 
and/or at a particular time. 

Preferably, the control system initially checks 
the validity of the token and is operable to cause 
rejection of an invalid token. 

The identifying information may initially be • 
received as the result of reading information from the 
token. Alternatively, the identifying information may 
initially be received from a source other than the 
token. 

The control system may be operable to permit a 
token to function as a key to a lock. The control 
system may be adapted for use with the token in the 
form of a credit card. 

The control system may comprise a central control 
unit in communication with a plurality of auxiliary 
control units wherein each auxiliary unit is in 
communication with at least one facility and is 
responsive to signals from the central control unit. 
The selected event may be the receipt by an auxiliary 
control unit of a selected signal from the central 
control unit. 
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The identifying information may be sent to the 
auxiliary control units from the central control unit. 
Alternatively, the identifying information may be sent 
to the central control unit via an auxiliary control 
unit. 

According to another feature of the present 
invention we provide a control system for use in 
connection with one or more facilities comprising means 
for receiving information identifying a payment token 
and/or the owner thereof to enable payment to be made 
for the use of the or each facility, which system is 
adapted also to recognise the payment token as a key 
and to permit access to and/or operation of one or more 
of the facilities when intermittently presented with 
the token after receiving said Identifying 
information. 

The payment token may be in the form of a credit 

card. 

A particular embodiment of the present invention 
will now be described, by way of example, with 
reference to the accompanying drawings in which: 

Figure 1 is a schematic diagram of a control 
system according to a first embodiment of the present 
Invention; 
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Figure 2 is a block diagram representing a 
charging station computer; 

Figure 3 is a block diagram representing an in-car 
computer; 

In general terras, in the embodiment a control 
system according to the present invention is 
incorporated in an urban transport system in which 
electrically powered vehicles are let for hire. The 
transport system comprises vehicle charging stations 
at different locations, each vehicle charging station 
comprising several charging points. A vehicle can be 
collected for hire by a user from a charging point at a 
vehicle charging station and, after use, can be 
returned to a charging point for recharging at the 
same, or at a different, charging station. 

Vehicles may be hired by users having any one of 
the commonly used credit cards carrying identifying 
information in magnetic form, which information is 
readable by wiping the credit card through the jaws on 
a card reader of known type. 

Each vehicle is provided with a credit card reader 
in the form of a pair of jaws mounted externally on the 
vehicle body just behind the opening for the driver 
door. The hire of a vehicle is initiated by the user 
wiping his or her credit card through the reader. 
Thereafter, alternately wiping that particular credit 
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card through the reader Jaws causes locking and 
unlocking of the vehicle doors thereby obviating the 
need to issue a separate door key to each user. That 
particular credit card is recognised by the control 
system until the car is returned to the chEu*ging point 
and the hire is terminated. If, during the hire, 
another person wipes a credit card of theirs through 
the reader Jaws, it will not be recognised by the 
control system. Thus, another random user cannot 
Interrupt the hire while the vehicle is being used by 
the first user, for example, when the vehicle is parked 
and left temporarily unattended by the first user. 

It is however envisaged to provide master cards 
for service mechanics to enable them to gain access to 
any of the vehicles at all times. 

Therefore, the control system is operative to 
allow a user to use a credit card to initiate a hire 
transaction and to enable a bill to be sent to the user 
at a later date and also to lock and unlock the vehicle 
doors during the hire period. The credit card thus 
takes on a dual role during that time. The credit card 
may also be used to terminate the hire transaction. 

Referring now to figure 1, the control system 
comprises a central computer 10 in communication with 
several charging station computers 12, one at each 
charging station 13f and an in-car computer 14 in each 
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vehicle. In figure 1, for simplicity only one charging 
station computer 12 is shown and is connected to the 
in-car computers 14 of two vehicles connected to 
charging points 15 at the charging station 13. 

The central computer 10 is in duplex communication 
with each of the charging station computers 12 and is 
linked to these by a fixed communication network of 
dedicated lines supervised by the central computer 10. 
Each one of the in-car coinputers 14 is linked 
temporarily to one of the charging station computers 12 
when the vehicle in question is connected to a charging 
point in the relevant charging station. The in-car 
computers 14 which are connected to a charging station 
computer 12 form a local network supervised by the 
charging station computer. During that time, the 
charging station computer 12 acts more or less 
transparently to permit the central computer 10 to 
communicate with any one of the in-car computers 14. 
When the vehicles are on hire and away from a charging 
station, the in-car computers 14 operate autonomously 
without any communication with the central computer 10 
or with any of the charging station computers 12. 

The charging connection between a vehicle and a 
charging point may be achieved by the user manually 
plugging the vehicle into a charging point or by an 
automatic connection effected when the vehicle is 
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driven up to charging point, for example, the vehicle 
may be provided with a fin receivable in a slot 
provided in the charging point. When a vehicle is 
connected to a charging point, its in-car computer 1^* 
communicates with the charging station computer 12 via 
an RF connection. The communication links between a 
charging station computer 12 and the in-car computers 
^^ in the vehicles on charging points at that charging 
station is of a multi-drop configuration and each of 
the in-car computers 14 is polled in sequence by the 
charging station computer 12, after first being 
identified on arrival by a special polling protocol, to 
collect data from the in-car computers ^^ and to 
transmit messages to them. 

The central computer 10 is responsible for overall 
supervision of the charging station computers 12 and 
the in-car computers 14 and also performs accounting 
functions and holds records containing customer 
details, current hire tarrifs, information relating to 
the vehicles for hire and their current operational 
status and information regarding the availability of 
parking space in each charging station. The central 
computer is also in communication with a central 
register holding current information relating to 
stolen credit cards so that the authenticity of a 
user's credit card can be checked. 
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The charging station computers 12 supervise 
vehicle hire and return and parking space reservation 
procedures with the support of the central computer 10. 
In the event of communication with the central computer 
10 being temporarily impossible due to computer or 
communications failure, the charging station computers 
12 have a limited ability to act automonously to handle 
hire returns and invoicing as will be described. 

The charging station computers 12 are powered from 
the mains. The in-car computers 1^ are powered from 
their vehicle batteries. In both cases, a RAM battery 
back-up is provided which will be recharged from the 
logic power supply. 

Referring to figure 2, each charging station 
computer 12 comprises an Intel 8085 microprocessor 16, 
an EPROM 18 for storing the application programmes and 
fixed data, a CMOS RAM 20 for storing variables such as 
time of day, hire tariffs etc, a coded switch 22 
carrying a vehicle station identification code and a 
timer 24 • The peripheral equipment associated with 
each charging station computer 12 comprises a cassette 
unit 26, a card reader 28, a keypad 30, a display 32, a 
printer 34 and an "all spaces reserved" sign 36. 
Suitable interfaces and drivers are provided for the 
peripheral components as indicated in figure 2. 
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The charging station computer 12 communicates 
with the in-car computers ^^ of vehicles at charging 
points via a serial communications interface 38 and a 
modulator ^0 and communicates with the central computer 
10 via a serial communications interface H2 and a modem 

The cassette unit 26 is inaccessible to the public 
and is used to store information passed between in-car 
computers 14 and the relevant charging station computer 
12 during any periods when communication with the 
central computer 10 is Impossible. When communication 
with the central computer 10 resumes, the information 
stored on cassette is recovered and transmitted to the 
central computer 10. 

The card reader 28, keypad 30, display 32 and 
printer 3^ are accessible to the public. They are all 
of known type and are of vandal-proof construction. 

When the card reader 28 Is presented with a credit 
card a PLEASE WAIT message is shown on the display 32 
whilst the charging station computer 12 determines the 
card category without referring to the central computer 
10. If the credit card is from a new hirer then a GO 
TO CAR message is shown on the display 32. If the 
credit card is one from a recently returned hirer then 
a receipt is printed by the printer 34. The printer 34 
is also used for printing general messages from the 
central computer 10. 
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The keypad 30 comprises numeric keys (0-9) and two 
function keys - a PARKING key for making a parking 
space reservation request and an ENTER key, A map of 
all of the charging stations in the area is provided at 
each charging station. Each charging station is given 
a particular reference number so that the user can key 
in the number of the charging station at which he 
wishes to reserve a parking space. The display 32 
indicates acknowledgement or rejection of parking 
space reservation requests and may also display any 
general messages about road or parking conditions sent 
to it from the central computer 10. 

The "all spaces reserved" sign is lit up when all 
the charging points at a charging station are either 
being used by vehicles or are reserved as parking 
spaces for vehicles yet to arrive. 

Similarly to the charging station computers 12, 
each of the in-car computers l^i comprises an Intel 8085 
microprocessor 46, an EPROM U8, RAM 50, coded switch 52 
carrying a particular vehicle identity code and timer 

The in-car computer 14 is connected to a card 
reader 56 comprising a pair of jaws and a display 58 
mounted externally on the particular vehicle and to a 
keypad 60, display 62 and voice synthesis system 64 
Inside the vehicle. The in-car computer 14 is also 
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connected to an LED strip display inside the vehicle, 
and to switches controlling the door locks, a parking 
brake, an emergency beacon, a reduced power output and 
the vehicle motor. 

Various sensors for sensing the charge-state of 
the battery, the motor current, whether the vehicle is 
in motion or on charge and the mileage covered are each 
connected to an appropriate digital input unit 68 for 
providing signals to the microprocessor U6. 

In response to presentation of a user's credit 
card, signals from the external card reader 56 will 
transmit serial information to the microprocessor ^6 
which will be used to qualify the hirer for charging 
purposes at the start of hire, to lock and unlock the 
vehicle doors during ' the period of hire and to 
terminate the hire. 

The external display 58 displays messages such as: 
BATTERY DEAD CONNECTED 
BATTERY LOW PLEASE WAIT 

ON CHARGE REENTER CARD 

CAR UNSERVICEABLE O.K. 
RESERVED ON HIRE 

AVAILABLE FOR HIRE HIRE REFUSED 

The display 62 inside the vehicle displays the 
charge accumulated for the current hire which is a 
function of the hire time and the LED strip display 
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indicates the time remaining before the vehicle battery 
requires charging. The internal display 62 also 
operates in conjunction with the keypad 60 to echo 
keyed selections and to warn of the consequences of 
confirming a selection. When a vehicle is at a 
charging point, the display 62 also displays messages 
received from the central computer 10. 

The keypad 60 comprises numeric (0-9) keys and 
function keys - a RESERVE key for reserving the vehicle 
for further use, a BEACON ON key, an UNSERVICEABLE key 
and an ENTER key. Selections are confirmed by typing 
999 and pressing the ENTER key. 

The voice synthesiser 64 comprises a voice 
synthesis unit 7^ and a speaker 76 and is used to 
provide an audible warning to the user if the battery 
voltage is low and also reminds the hirer to remove all 
his goods at the end of the hire period. Audio 
messages include "battery dead", "battery low" and 
"terminate hire instructions". 

The emergency beacon is operable to transmit radio 
signals to permit location of the vehicle in the case 
of battery failure or other break-down and in the case 
of some forms of unauthorised use. The emergency 
beacon is independently battery powered. 

The door locks are each operated by a solenoid 
switch responsive to signals from the processor 46. 
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In use, the battery voltage measured will be 
compared against reference "low" and "dead" limits. 
The "low" limit indicates an urgent need to recharge 
and in that event further use of the vehicle will only 
be permitted at reduced power. If the battery voltage 
has reached the "dead" limit the in-car computer 1^ 
prevents further use of the vehicle, outputting BATTERY 
DEAD on the external display 58, turning off the motor 
and emitting an audio message to the user.. The 
emergency beacon is then activated. In fact, a battery 
reserve is available but is only released in response 
to presentation of a master card to the Ccird reader 56. 

The following page is a summary of the messages 
which pass between the central computer 10 and the 
charging station computers 12 and between each charging 
station 12 and the In-car computers ^^ ot the vehicles 
at that charging station - 

Reading from the top of that summary the central 
computer 10 sends regular STATION ID polling signals to 
each charging station computer 12 to permit information 
to be sent from each charging station 12 to the central 
computer 10. Likewise, each of the charging stations 
12 sends regular polling signals to the in-car 
computers 14 of the vehicles at that charging station. 
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COMQUNICATIONS MESSAGE SUMMARY 
Car < > Charging StaUgn 



( N 



<- CAR I-D. POLL 



<- STATION l.D. POLL <" 



<- NEW ARRIVAL POLL 
-> CAR STATUS nessage 



•> - 



C- STATUS INTERROGATION <- 



-> ARRIVAL message -> 
-> STATUS oessage -> 



<- STATUS INTERROGATION <- 
-> STATION STATUS Bessage-> 



-> TERMINATE HIRE 



-> > TERMINATE. HIRE 

-> CHARGE fflessage 



REQUEST FDR HIRE 
<- AUTHORIZE/REFUSE 



.> > request fdr hire -> 

; /_ 'good/bad card 



-> PARKING SPACE REQUEST -> 

^ Y 

<- CONFIRM/REFUSE <- 



<- FREE MESSAGE (Car) 



< <- pREE MESSAGE (Car) <- 

* <- FREE MESSAGE (Ch.St.) <- 



<- BEACON OFF <- 
<" RETURN TO SERVICE (- 
<" RELEASE RESERVATION <■ 



-> DEPARTURE message -> 

<- BEACON OFF <- 

<- RETURN TO SERVICE <- 

<- RELEASE RESERVATION <- 



<- CAR PARK FULL/SPACE <- 
-> CASSETTE DUMP -> 
<- STRATEGIC DATA iae£5age<" 
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The system is programmed so that the in-car 
computers 1^1 in all of the vehicles at a charging 
station are receptive to NEW ARRIVAL poll messages from 
the charging station computer 12. This polling message 
sets the receiving ID (which will then be unknown) to 
zero and, if an in-car computer 1U is receiving that 
pole for the first time on returning to a charging 
station, it will respond by giving its ID in a CAR 
STATUS message containing information about the 
battery state and whether the car is: serviceable or 
unservicable, on charge, reserved or available; 
together with information as to the state of the beacon 
and the time of day from the in-car computer clock. 

The charging station computer 12 sends regular 
STATUS INTERROGATION messages to the in-car computers 
^^ connected thereto and the in-car computers 1M 
respond with CAR STATUS messages which are transmitted 
via the charging station computer 12 to the central 
computer 10. Likewise, the central computer 10 
transmits STATUS INTERROGATION messages to each 
charging station computer 12 which responds by 
providing information relating to the number of 
vehicles presently at that station, the number of 
available parking spaces etc in a STATION STATUS 
message to the central computer 10. 
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On termination of a hire, a TERMINATE HIRE message 
is sent from the in-car computer 14 to the central 
computer 10 via the charging station computer 12 and 
the charging station computer 12 also sends a CHARGE 
message to the central computer 10 including 
information regarding the hire charge calculated, VAT 
calculation, invoice serial number and the time of day. 

When a new hirer wipes his or her credit card 
through the card reader 56 on the body of a vehicle at 
a charging point, this causes a REQUEST FOR HIRE 
message to be sent from the in-car computer 14 to the 
central computer 10 via the charging station computer 
12. The central computer 10 checks whether the credit 
card is acceptable by accessing the central credit card 
register and sends a GOOD/BAD CARD signal, as 
appropriate, to the in-car computer 14 via the charging 
station computer 12 to authorise or refuse the hire 
respectively. 

In response to a request for parking space made 
using the keypad 30 at a charging station, the central 
computer 10 checks whether there are any parking spaces 
presently available at the particular charging station 
to which the request relates and sends a signal 
confirming or refusing the request, as appropriate, 
which is displayed on the display 32 at the first 
charging station. 
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Messages of a general nature can be transmitted 
from the central computer 10 to the in-car computers 14 
via the charging station computers 12 and to the 
charging station computers 12 themselves. When a 
vehicle leaves a charging point, the charging station 
computer 12 senses this by failure of the in-car 
computer 1^1 of that vehicle to response to its polling 
signals and then sends a DEPARTURE message to the 
central computer 10. 

Signals for turning vehicle beacons off, 
returning vehicles to service and for releasing vehicle 
reservations are sent from central computer 10 to the 
in-car computers 1^1 of the respective vehicles via the 
charging station computers 12. 

The central computer 10 also sends a signal to 
each of the charging station computers 12 indicating 
whether there are any spaces still available at that 
charging station, i.e whether there are any charging 
points not already occupied by vehicles which are not 
reserved, and the charging station computer 12 operates 
the sign 36 accordingly. 

The CASSETTE DUMP message is employed to transfer 
information recorded on the charging station cassette 
during periods of non-communication with the central 
computer 10. 
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The STRATEGIC DATA message sent from the central 
computer 10 to the charging station computers 12 
relates to housekeeping tasks performed by the central 
computer 10 once a day and contains information 
including the next 7 day's tariff. 

Use of the urban transport system will now be 
described. 

If, on entering a charging station, a new hirer 
wipes a credit card through the card reader 28 of the 
charging station computer 12, a GO TO CAR message will 
appear on the display 32. If the user finds that in 
fact there are no vehicles at that particular charging 
station which are presently available for hire, on 
again wiping its card through the reader 28, the 
display 32 will indicate the expected time at which the 
next vehicle will complete battery charging or will 
return from hire. 

The user may make a request to reserve a parking 
space at the same charging station or at a different 
charging station by pressing the PARKING key of the 
keypad 30. The display 32 then indicates the 
consequence of making such a request i.e details of the 
charge which will be levied for reserving a parking 
space irrespective of whether it is taken up. The 
display 32 then indicates a request for confirmation of 
the parking reservation which is confirmed by the user 
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keying in code 999 and pressing the ENTER key. The 
display 32 then requests entry of the destination code 
of the charging station in question which the user keys 
in by referring to the map provided and by using the 
numeric keys followed by the ENTER key. These entries 
are echoed on the display 32. A PARKING SPACE REQUEST 
message is then sent to the central computer 10 and a 
PLEASE WAIT MESSAGE is indicated on the display 32. 
Confirmation or refusal of the request is subsequently 
displayed on the display 32. The central computer • 
allocates a certain amount of time for the reserved 
parking space to be taken up depending on the distance 
between the charging station at which the parking space 
reservation request is made and the one which is the 
user's intended destination. After that time the 
reservation is automatically cancelled. 

The user then goes to any vehicle displaying 
AVAILABLE FOR HIRE on the external vehicle display 58 
and wipes his credit card through the jaws of the 
external reader 56 on the vehicle. This will cause the 
display 58 to indicate a PLEASE WAIT message. A 
REQUEST FOR HIRE message will then be sent to the 
central computer 10 via the charging station computer 
12 which will either authorise or refuse the hire. If 
the central computer 10 is temporarily unavailable then 
no new hires will be authorised until later. 
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The effect of an AUTHORISED HIRE message being 
relayed to the in-car computer 1^ by the charging 
station computer 12 is that the hirer's credit card 
number, the current tariff, last mileage reading and 
time of the day are stored in the memory of the in-car 
computer IM. If necessary, the mileage and time of day 
information is updated in the memory of the in-car 
computer 14. An O.K message is displayed on the 
display 58 of the vehicle and the in-car computer 
processor M5 sends a signal to the solenoid switches 
controlling the vehicle door locks so as to unlock the 
door. From then on, the hire time is recorded. The 
display 58 then indicates an ON HIRE message. 

If the central computer 10 finds the user's credit 
card to be invalid it will refuse the hire and a HIRE 
REFUSED message will appear on the display 58. 

An authorised hirer can then drive the vehicle 
away from the charging point. The vehicle is fitted 
with a press-button ignition so that no separate 
ignition key is necessary. 

While on hire, the in-car computer 14 computes the 
current hire charge using the stored tariff and a 
measure of the elapsed time since the beginning of the 
hire. The driving time which remains is calculated 
using signals from the battery state and motor current 
sensors as it depends on the initial charge state of 
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the battery and a running' integral of time and motor 
current. An audible warning is issued by the voice 
synthesizer 6^ when the estimated time to "battery low" 
condition is 15 minutes. The current hire charge is 
displayed on the internal display 62 and the driving 
time remaining is represented on the LED strip display 
inside the vehicle. 

The in-car computer 1^ responds to signals from 
the "in motion" sensor and the motor current sensor by 
activating the parking brake if the vehicle is 
stationary and the motor current is low and releasing 
the parking brake if the motor current Increases. 

In the event that charging of the battery is 
sensed when the vehicle is not at a charging point, the 
in-car computer 1^ acts to operate the emergency 
beacon. 

During the hire, the user can park the vehicle in 
the normal way and by wiping his credit card through 
the Jaws of the external card reader 56 causes the 
vehicle doors to be locked. On returning to the 
vehicle and again wiping his card through the jaws of 
the card reader 56 the doors are again unlocked and so 
on. The in-car computer 1^1 is programmed so as to 
recognise only that particular credit card during the 
hire of that user and will not respond to any other 
cards except a master card held by a service mechanic. 
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Should the user press either of the UNSERVICEABLE 
or BEACON ON keys of the interior keypad 60, the 
display 62 indicates the consequence of that action and 
requests confirmation. If confirmed, the appropriate 
message is displayed on the external display 58 and a 
service mechanic will be called. 

On returning to a charging station, the user 
connects the vehicle to a charging point at which time 
communication between the in-car computer 1^ and the 
charging station computer 12 is established. The ■ 
internal display 62 will show CONNECTED to advise the 
user of successful docking. The user then has the 
option of reserving that vehicle if he wishes or of 
terminating the hire. He can reserve the vehicle for a 
predetermined period of time by pressing the RESERVE 
button on the internal keypad 60 and, if the request 
for reservation is confirmed, the hire will continue 
even if the user leaves the car and locks the doors by 
again wiping his credit card through the reader 56. 
Otherwise, the act of locking the vehicle doors with 
the vehicle is connected to a charging point will serve 
to terminate the hire. If the external card reader 56 
on the vehicle is not used within a set period of time 
from docking of the vehicle at a charging point, then 
the car doors will automatically be locked by the 
in-car computer 14 and the hire will be terminated. A 
penalty charge may be levied in that instance. 
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Before hire is terminated, the user will be asked, 
either using the internal display 62 or the voice 
synthesiser 6^, to press the UNSERVICEABLE button on 
the keypad 60 if the car has a fault and to leave a 
written fault report. He will also be advised that a 
receipt may be obtained at the central desk. 

On leaving the vehicle, if the user wishes to 
obtain a receipt he wipes his credit card through the 
card reader 28 of the charging station computer 12 and 
a receipt will be issued by the printer 3^. 

It is envisaged that each charging station may be 
provided with an entry barrier and a further card 
reader associated with the barrier so that hirers 
returning vehicles can be prevented from using p'arking 
spaces reserved by others. 

Although the control system is programmed to 
recognise standard credit cards a special purpose 
credit card may be issued to regular users. 

It is envisaged that programmed maintenance 
devices will be provided which can communicate with the 
in-car computers 1^ using the communication link 
normally used for interconnecting the in-car computers 
14 with the charging station computers 12. The 
maintenance devices will be used for test purposes. 

It should be understood that many variations are 
possible whilst still falling within the scope of the 
present invention. 
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In particular, any suitable wipe-through sequence 
of a credit card in the card reader 56 may be devised 
for initiating the hire transaction and thereafter for 
unlocking and locking the car doors. The in-car 
computers 14 may be programmed so as to lock and unlock 
all the vehicle doors simultaneously or so as to lock 
and unlock only the driver's door as required. 

As well as or instead of unlocking and locking the 
car doors further facilities may be controlled by the 
control system, for example, activation of the vehicle 
ignition. 

Furthermore, it should be appreciated that the 
control system according to the present invention may 
be adapted to be used in connection with any type of 
appliance let for hire for example all types of 
machinery, tools etc in which an information carrying 
token can be used as a key to operate an on/off switch 
or to access other control means. 

In relation to the embodiment described above, 
instead of a credit card, any other type of information 
carrying token can be used together with an appropriate 
means for reading information from the token. 
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CLAIMS: 

1 . A control system for use in connection with one or 
more facilities of a vehicle comprising means for 
receiving information identifying a particular token, 
which system is operable so as, when intermittently 
presented with the token after receiving said 
identifying information, to recognise that token as a 
key and to permit access to and/or operation of one or 
more of the facilities until a predetermined time has 
elapsed or a selected event has occurred and until then 
not to recognise tokens of other random users, and 
thereaf t er no longer to permit access to and/or 
operation of the or each facility until further 
Identifying information relating to a valid token is 
received. 

2. A control system according to claim -1 wherein the 
selected event is presentation of the token to the 
control system in a particular manner and/or at a 
particular time. 

3. . A control system according to claim 1 or claim 2 
which initially checks the validity of the token and is 
operable to cause rejection of an invalid token. 
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A control system according to any preceding claim 
wherein the identifying information is initially 
received as a result of reading information from the 
token. 

5. A control system according to any of claims 1 to 3 
wherein the identifying information is initially 
received from a source other than the token. 

6. A control system according to any preceding claim 
which is operable to permit a token to function as a 
key to a lock. 

7. A control system according to any preceding claim 
adapted for use with a token in the form of a credit 
card, 

8. A control system according to any preceding claim 
comprising a central control unit in communication with 
a plurality of auxiliary control units wherein each 
auxiliary unit is. in communication with at least one 
facility and is responsive to signals from the central 
control unit. 

9. A control system according to claim 8 wherein the 
selected event is the receipt by an auxiliary control 
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unit of a selected signal from the central control 
unit. 

10. A control system according to claim 8 or claim 9 
wherein the identifying information is sent to the 
auxiliary control units from the central control unit. 

11. A control system according to claim 8 or claim 9 
wherein the identifying information is sent to the 
central control unit via an auxiliary control unit. 

12. A control system according to any preceding claim 
adapted for use in a vehicle transportation system. 

13. A control system according to claim 12 operable to 
permit a token to function as a key to the door of a 
vehicle. 

1^. A control system according to claim 12 when 
dependent on claim 8 wherein an auxiliary control unit 
is disposed in each vehicle. 

15. A control system according to claim 14 wherein the 
vehicles are electrically powered and the auxiliary 
control units are connectable to the central control 
unit via intermediate control units associated with 
means for charging the vehicles. 
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15. A control system according to any of claims 12 to 

15 wherein means for reading information from a token 
is mounted externally on the body of each vehicle. 

17 • A control system according to any of claims 12 to 

16 wherein the selected event is presentation of the 
token to token reading means associated with the 
relevant vehicle when the vehicle is . connected to a 
charging point after having just returned from hire. 

18. A control system according to any preceding claim 
comprising means for receiving information identifying 
a payment token and/or the owner thereof to enable 
payment to be made for the use of the or each facility, 
which system is adapted also to recognise the payment 
token as a key and to permit access to and/or operation 
of one or more of the facilities when intermittently 
presented with the token after receiving said 
identifying information. 

19. A control system according to claim 18 comprising 
means for calculating the costs involved in the use of 
the or each facility. 

20. A control system according to claim 19 which is 
arranged so that presentation or information 
identifying the payment token and/or the owner thereof 
initiates calculation of the costs involved. 
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